bcb4e51a409d94ae670de96afb8483a4f7855294 |
|
01-Jan-2018 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2018. |
d69c66d770b53ec0877ba09e85ee19e379f61015 |
|
01-Nov-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap-proxy: Don't discard the first pipelined command after LOGIN |
9f6686c87555e7197e032b8b65c764623db22409 |
|
14-Jun-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap-login: Remove duplicate spaces between ID x-forward parameters |
998eadc15aabe598cc9301fdb28c0fef5225b3f7 |
|
19-Mar-2017 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
imap-login: Allow x-forward- to specify forward fields from trusted networks |
a9523ec8f6c32ccdfe3a78d743a9cd749c3eb3aa |
|
19-Mar-2017 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
imap-login: Forward original client ID to next hop
This will be done if ID is present. |
b4bf60434dcfc23433fc09e1899bba4a8b20022e |
|
09-Mar-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap-login: Log proxy state as human-readable string.
Separate sent/received state and log them as strings. |
2454dfa32c93c20a8522c6ed42fe057baaac9f9a |
|
01-Jan-2017 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
Updated copyright notices to include the year 2017. |
efe78d3ba24fc866af1c79b9223dc0809ba26cad |
|
24-Dec-2016 |
Stephan Bosch <stephan.bosch@dovecot.fi> |
global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro.
Used the following script:
C_FILES=`git ls-files *.c`
H_FILES=`git ls-files *.h`
for F in "$C_FILES $H_FILES"; do
echo "$F"
perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F
perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F
perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F
perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F
done |
2c5c293940fd6c7e020e1d58dae77a9d01f9059b |
|
23-Dec-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
*-login, imapc: Fix new lib-sasl API usage
Forgot to include these in a669d351502e15802b121e1a0bd83f27d1d95f01 |
6d24551e169c0808695db35d7a228f1970a84c75 |
|
01-Nov-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap/pop3 proxy: If passdb returns proxy_not_trusted, don't send ID/XCLIENT
This allows using Dovecot proxying feature towards less trusted servers. |
9a6fe618193d3029328a9b056d4435f135a64bfd |
|
20-Sep-2016 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
imap-login: Add missing brace |
c24150b68efb24c12e95ec101f382d5c40cd15c9 |
|
20-Sep-2016 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
imap-proxy: Fix typo in comment |
abd4203d97d6db19550fc45d6b6806b2deadb625 |
|
20-Sep-2016 |
Aki Tuomi <aki.tuomi@dovecot.fi> |
imap-login: Honor nopipelining during preauth |
52fe791133ad838c3aca3f1c88f96aab755950f8 |
|
19-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap-login: If LOGINDISABLED capability is advertised in banner, don't try to LOGIN without SSL/TLS.
This avoids accidentally sending the password in plaintext. Also the server
should fail the LOGIN in any case. |
0af9ef2e9bb71a426bba236e74ceec30be699fb7 |
|
15-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
imap-login: Renamed client.[ch] to imap-login-client.[ch]
This allows installing the imap-login-client.h without conflicting. |
02c335c23bf5fa225a467c19f2c063fb0dc7b8c3 |
|
12-Jan-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
global: freshen copyright
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/' |
814bf67459ad405a157af0b8940602024d7fadfe |
|
23-Sep-2015 |
Teemu Huovila <teemu.huovila@dovecot.fi> |
Remove now-unnecessary direct stdlib.h #includes. |
7cb128dc4cae2a03a742f63ba7afee23c78e3af0 |
|
05-Jan-2015 |
Phil Carmody <phil@dovecot.fi> |
global: freshen copyright
Robomatically:
git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/'
Happy 2015 everyone!
Signed-off-by: Phil Carmody <phil@dovecot.fi> |
a8c5a86d183db25a57bf193c06b41e092ec2e151 |
|
04-Feb-2014 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2014. |
c3ad163c5d78e6c6f9dbe90ab949506c038d3275 |
|
15-Jan-2014 |
Timo Sirainen <tss@iki.fi> |
imap-proxy: Fixed resetting proxy state after failed login. |
41783dcf1bcd7118440c9c40a691a09fb98a9460 |
|
15-Jan-2014 |
Timo Sirainen <tss@iki.fi> |
imap-proxy: Recent changes caused CAPABILITY repeating with pipelining disabled. |
3bc9d91f987261e989aa653fd412b0e8095e4810 |
|
10-Jan-2014 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Avoid duplicate CAPABILITY reply when backend is Dovecot.
This happened if the client sent a CAPABILITY command to the proxy. |
737d994fb6bb0f3e87f7412e35874694013d2fc3 |
|
07-Jan-2014 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Set proxy_state correctly also with proxy_nopipelining. |
ab281fc992907b6cf6c730f672dc3aa4c6685015 |
|
23-Dec-2013 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Added proxy_nopipelining passdb setting to work around other servers' bugs. |
de754cb78f75e8b3b994cddafe41c9ed1467c33d |
|
26-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
lib-sasl: Use dsasl_ prefix so we don't conflict with Cyrus SASL library. |
5324117274df8564eeaebe369cb1eca76edb3165 |
|
24-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
imap-login: If CAPABILITY is already in server banner, don't ask for it again. |
26681e71837ebbb3eb92455ec4e3cadefa710f82 |
|
18-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Master user logins were broken by lib-sasl change. |
d229d26d263a57a77eec8fe7cba24fbfd9509966 |
|
16-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
Make static analyzer happier. |
1093de32efb2a231949566d4bd8aa55a8f43fb70 |
|
09-Jun-2013 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Use libsasl for authenticating to remote IMAP/POP3 server.
Also passdb lookup can return "proxy_mech" extra field to specify which SASL
mechanism to use. |
9508ac436fff0e1dcea975855c139cd251deb703 |
|
21-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
proxying cleanup: Send TTL=1 (instead of TTL=0) as "no more proxying". |
5a580c3a38ced62d4bcc95b8ac7c4f2935b5d294 |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Oops :) Update copyrights to 2013 without breaking all .c files. |
cca4ba2a504d70a9fe9fee37f8433997359de52c |
|
02-Feb-2013 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2013. |
686ad6d723004b807fd558f3ef9d1f88afa7e127 |
|
24-Oct-2012 |
Timo Sirainen <tss@iki.fi> |
Use imap_append_*string() instead of imap_quote_append*() where possible.
This makes it clearer what types of output should be sent. |
e2a88d59c0d47d63ce1ad5b1fd95e487124a3fd4 |
|
24-Jun-2012 |
Timo Sirainen <tss@iki.fi> |
Added o_stream_nsend*() and related functions to make delayed error handling safer.
Once o_stream_nsend*() is called, o_stream_nfinish() must be called before
stream is destroyed to finish checking if there were any errors. If
something failed and the stream is just wanted to be closed,
o_stream_ignore_last_errors() can be called.
For streams where errors don't really make any difference (network sockets)
you can call o_stream_set_no_error_handling() immediately after creating the
stream. |
b55f914c0ade77252cfd798ea8eb9a84bda56315 |
|
07-Mar-2012 |
Timo Sirainen <tss@iki.fi> |
Added a "session ID" string for imap/pop3 connections, available in %{session} variable.
The session ID passes through Dovecot IMAP/POP3 proxying to backend server.
The same session ID is can be reused after a long time (currently a bit
under 9 years). |
ddbdc644a15f56f4b43596f1b8c0fc196c101445 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
imap/pop3/lmtp proxy: Implemented detection of proxy loops with TTL.
If proxying tries to continue after 5 forward connections, it fails. The
limit of 5 is hard coded currently. |
9f627b360ed38fdc54cb02ec5e67246c3f0d5b0f |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
login-common API made more extensible for different kinds of protocols.
Patch by Stephan Bosch. |
5f5870385cff47efd2f58e7892f251cf13761528 |
|
12-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2012. |
80980955bb1bbcc1bd73623fe0912f334194ddd2 |
|
27-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
login proxy: If remote auth fails, say so in disconnect message instead of "internal failure". |
ac45ba9c603b67cc43fa7bceffdef0a19100720b |
|
27-Jan-2012 |
Timo Sirainen <tss@iki.fi> |
login: More verbose_auth -> auth_verbose changes. |
2e37d45867d081db150ab78dad303b9077aea24f |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
183bea41fa640dc8117f3eb45ff935cd81377a84 |
|
04-Mar-2011 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2011. |
3612ee5c737954d5fb88fd1775aad80f7bf1dc4e |
|
12-Aug-2010 |
Timo Sirainen <tss@iki.fi> |
login proxy: Show proxy state in "disconnected" error message. |
e59faf65ce864fe95dc00f5d52b8323cdbd0608a |
|
25-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2010.
--HG--
branch : HEAD |
46552a931924c2d743f045e95b08c3ce6beda91a |
|
02-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login-common: Renamed common.h to login-common.h
--HG--
branch : HEAD |
be71a9de88d1266597eb8c5e0b6f519d90e14397 |
|
02-Nov-2009 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Always send post-login capability to client.
The original code did it only when client had used CAPABILITY command. Now
it's also sent in tagged reply to login/authenticate command if the remote
server didn't already add it.
--HG--
branch : HEAD |
27d50b3aa143964143e4bef66c0bfe3c72aea233 |
|
01-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Don't fail if LOGIN parameters were sent using literals.
--HG--
branch : HEAD |
31750e7fddc514c68c4eaf85b4f8c00000c281e0 |
|
30-Sep-2009 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Don't log "unexpected input" errors about tagged CAPABILITY replies.
--HG--
branch : HEAD |
9c47edf0d1aa8afa6d05dde93e7aa5169059c94a |
|
23-Sep-2009 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Detect and log invalid remote input.
--HG--
branch : HEAD |
e248fe370c4047cee921a91b48edc37944ab0526 |
|
10-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved most of the common code to login-common.
--HG--
branch : HEAD |
00fa8dcbc66f56daa737487c9dec7166c37de79e |
|
09-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Use a common client_send_line() API.
--HG--
branch : HEAD |
07e7066e0f40899181a195c247a08639366d7567 |
|
17-Jun-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login: Using CAPABILITY command after STARTTLS shouldn't trigger CAPABILITY pushing workaround.
--HG--
branch : HEAD |
087eb3d719a5667631cc7ce9de6c372ddea19f4d |
|
16-Jun-2009 |
Timo Sirainen <tss@iki.fi> |
imap proxy: Pass through to client unexpected untagged replies from remote server.
--HG--
branch : HEAD |
bbba7d0fce1b6ce5baa2d7ef946eb1b63e2ab518 |
|
28-May-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login now advertises only pre-login capabilities.
If client had used CAPABILITY command before logging in, untagged CAPABILITY
is sent to client in the hope that client understands this. This change
could get reverted if it breaks too many clients.
--HG--
branch : HEAD |
97db4761382024093f441e4bc78ba8b6a056504d |
|
15-May-2009 |
Timo Sirainen <tss@iki.fi> |
login processes: Added initial support for per-connection configuration.
--HG--
branch : HEAD |
e95dba8921087afebb8a92c592af3b8ca22ae796 |
|
29-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Support SSL/TLS connections to remote servers.
passdb can return ssl=yes, ssl=any-cert and starttls options.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
3cb26db7f4756b71ba06c6e4950fa4f8ce7fad66 |
|
22-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap-proxy: Send backend's CAPABILITY if it's different from what was sent to client before.
--HG--
branch : HEAD |
53d564c421ca7292d7b1bd945f86894a34b75370 |
|
22-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap-proxy: Don't break ID capability check if it's the last capability.
--HG--
branch : HEAD |
e3a838c80f54f024115fade93c6c87a0998f1fab |
|
07-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap-login: Use [resp-codes] to figure out when to replace remote's auth failed message with ours.
--HG--
branch : HEAD |
eb188b2a2d5395b2c6125f875ec053b04a10e5fb |
|
24-Feb-2009 |
Timo Sirainen <tss@iki.fi> |
imap-proxy: Minor code cleanup
--HG--
branch : HEAD |
a64adf62fa33f2463a86f990217b0c9078531a40 |
|
28-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for config rewrite.
--HG--
branch : HEAD |
45312f52ff3a3d4c137447be4c7556500c2f8bf2 |
|
06-Jan-2009 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2009.
--HG--
branch : HEAD |
8372fc7efb6d64dff2e5f55fb4a3822c56869cfe |
|
21-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Cleaned up proxying code. Don't disconnect client on proxy failures.
Log proxy failures as errors.
--HG--
branch : HEAD |
ccef83820a01bb37ad48653a05a9c5aa6560826a |
|
14-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Support master user logins.
--HG--
branch : HEAD |
6e8ad595d0603295f57bef576da8a3a00b55c5e2 |
|
29-Aug-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-proxy: If auth_verbose=yes, log proxy login failures.
--HG--
branch : HEAD |
d67848ba944a3172c4834c591ddc921fa4ff16b1 |
|
14-Aug-2008 |
Timo Sirainen <tss@iki.fi> |
Proxy: Log destuser in the "proxying" line if it's different from username.
--HG--
branch : HEAD |
cd94aeaa294f7cc507206b4b2075852f00e14d61 |
|
20-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
If commands are pipelined after the login command, pass them to the
IMAP/POP3 process so it can process the command instead of discarding it.
--HG--
branch : HEAD |
493123e38ca1f27b07ac30dcbc59663c5fcdcba2 |
|
21-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
Renamed x-local-ip/port to x-connected-ip/port
--HG--
branch : HEAD |
89795c6bbbc52bb382e88bc8617d22092223e9a5 |
|
21-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
Support transferring original IPs and ports through IMAP proxies.
Clients from login_trusted_networks are allowed to override them. Dovecot's
IMAP proxy sends them via IMAP ID command. They're always sent if the remote
advertises ID in the banner's CAPABILITY.
--HG--
branch : HEAD |
8e50329e2c5e3a199674ae9f6d3dfcddab02487b |
|
24-Apr-2008 |
Timo Sirainen <tss@iki.fi> |
Send the success reply in one write. Based on patch by Onno Molenkamp.
--HG--
branch : HEAD |
afd0a4b74b14ba4d01175ab13fc5eeedff1e8b06 |
|
26-Mar-2008 |
Timo Sirainen <tss@iki.fi> |
Log clearly with "auth failed, # attempts" if user gets disconnected before
logging in.
--HG--
branch : HEAD |
4b6ddd3770c8484da7308032b75fc93b91aa1b49 |
|
06-Feb-2008 |
Timo Sirainen <tss@iki.fi> |
If proxy fails to log in to the backend server, forward the error message
instead of always replying with a generic "Authentication failed", which
could hide temporary failure and "too many connections" errors. However if
the backend isn't Dovecot, this could allow an attacker to find out what
users exist on the system.
--HG--
branch : HEAD |
45155bb1250cf5a120278f349465aded513a100f |
|
06-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Make sure all user input is sanitized before it's logged.
--HG--
branch : HEAD |
76b43e4417bab52e913da39b5f5bc2a130d3f149 |
|
01-Jan-2008 |
Timo Sirainen <tss@iki.fi> |
Updated copyright notices to include year 2008.
--HG--
branch : HEAD |
89a126810703c666309310d0f3189e9834d70b5b |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Replaced my Copyright notices. The year range always ends with 2007 now.
My name was replaced with "Dovecot authors". In many cases I didn't really
even own the copyright, so this is more correct.
--HG--
branch : HEAD |
d7cd49f01fad7c87c5a0865ebf54a548275e9fee |
|
15-Feb-2007 |
Timo Sirainen <tss@iki.fi> |
Don't crash if the remote server disconnects before we're logged in.
--HG--
branch : HEAD |
1eff76c5dbd2ff14bbb7e40a164c290931bdf692 |
|
19-Jan-2007 |
Timo Sirainen <tss@iki.fi> |
Log the proxy destination host:port.
--HG--
branch : HEAD |
2cfe9983ce7a6280636ee12beccc2e865111967b |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Replaced void *context from a lot of callbacks with the actual context
type. Also added/fixed some context type checks.
--HG--
branch : HEAD |
9362c5623da599e4bb6ba8e9780c12b01ba6ce2d |
|
03-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Fixed crash with proxying.
--HG--
branch : HEAD |
b3ae85f3552d98bb2f7a6efd8039e1d3f0423058 |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Memory leak fix
--HG--
branch : HEAD |
feb665db52583259a1f42037c6e8a22852aa8889 |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
Crashfixes and more asserts. Mostly related to use of AUTHENTICATE/AUTH
commands.
--HG--
branch : HEAD |
9bc0204ec8bda657ce2e96e6ae715e4034f1538b |
|
07-Nov-2006 |
Timo Sirainen <tss@iki.fi> |
If client disconnects before logging into remote server is complete, don't
crash/leak memory.
--HG--
branch : HEAD |
16d07eb86f82da6389cb06cbe77e12bbb0a6c103 |
|
14-Oct-2006 |
Timo Sirainen <tss@iki.fi> |
Reference counter fixing for client while it's being used in login proxy.
Fixes crashes.
--HG--
branch : HEAD |
71f1783adc89b4fe3588c72b23e059b320da8fad |
|
10-Aug-2006 |
Timo Sirainen <tss@iki.fi> |
Fixes for handling near-full connection queues.
--HG--
branch : HEAD |
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5d |
|
14-Jan-2006 |
Timo Sirainen <tss@iki.fi> |
deinit, unref, destroy, close, free, etc. functions now take a pointer to
their data pointer, and set it to NULL. This makes double-frees less likely
to cause security holes.
--HG--
branch : HEAD |
c0594b0763a084d2648e0df8c9b525ef094cceda |
|
07-Jan-2005 |
Timo Sirainen <tss@iki.fi> |
proxy: When we can't connect to remote server, show "Temporary login
failure." error to client instead of internal error.
--HG--
branch : HEAD |
ab1236617440e654d5c5a043b677512714b788dd |
|
27-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Keep proxy_user stored until proxy is destroyed.
--HG--
branch : HEAD |
00b2227d6ff65629707670b7b8dfd236fced8293 |
|
20-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Fixes.
--HG--
branch : HEAD |
0745a5190c95a5ca80f7ff32e4db8e429dc2a03f |
|
20-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Logging changes.
--HG--
branch : HEAD |
f30577ff7cf29858f1878abe963b4f40a436434f |
|
19-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
More smart IMAP and POP3 proxies. Now if remote login fails, it just
destroys the proxy and allows trying another username which can go elsewhere.
Also now replies with the same old "Authentication failed" error message
instead of showing remote server's failure message.
--HG--
branch : HEAD |
ba90e657bc68a72ab3b3021e2f4a874fac9965ba |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Added IMAP and POP3 proxying support.
--HG--
branch : HEAD |